Mozilla will disable Secure Socket Layer (SSL) encryption in its latest version of Firefox browser that will be release on November 25 after a security bug was discovered in SSL 3.0.
"By exploiting this vulnerability,an attacker can gain access to things like passwords and cookies, enabling him to access user's private account data on a website.",said Mozilla on its blog.
The code to disable the SSL 3.0 will be shortly available via Mozilla Nightly(in-development version of Mozilla's browser).
Mozilla also said that Firefox 35 will support a Transport Layer Security (TLS) downgrade protection mechanism called Signaling Cipher Suite Value (SCSV),as a safety measure.
Also read about Poodle Bug.
Also read about Poodle Bug.
Post a Comment